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ABSTRACT 



In this paper we will be consider organization of analytical work in the field of information security in the 
enterprise. This is important problem in the field of Security information in the enterprise. We will be consider analysis of 
the object of protection; analysis of internal and external threats to information security; analysis of possible channels of 
unauthorized access to information; analysis integrated security system objects; analysis with violations of the 
confidentiality of information; analysis prerequisites to the disclosure of information as well as to the loss of confidential 
information carriers 



Analysis of the state of information security - is a comprehensive study of the facts, events, processes, phenomena 
associated with protecting information, including data on the state of work on the identification of possible channels of 
information leakage, about the causes and circumstances that contribute to leaks and breaches of secrecy (confidentiality) 
in the course of daily business operations. The main purpose of the analytical work - to develop effective measures, 
proposals and recommendations to administration aimed at preventing the leakage of confidential information about the 
activities of enterprises and activities. Analytical work should include elements of forecasting the possible actions of the 
enemy to obtain important information to be protected. 

The main directions of analytical work in the company are as follows: 

• Analysis of the object of protection; 

• Analysis of internal and external threats to information security; 

• Analysis of possible channels of unauthorized access to information; 

• Analysis integrated security system objects; 

• Analysis with violations of the confidentiality of information; 

• Analysis prerequisites to the disclosure of information as well as to the loss of confidential information carriers. 
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FUNCTION ANALYSIS OF THE COMPANY 

Function analysis of the company assigned to specially created in its structure analysis unit, which is equipped 
with qualified experts in the field of information security. However, these professionals must fully own the information in 
aU areas of business: know kinds of character and sequence of production activities, associated organizations, the specifics 
of the structural units of the company, etc. Typically, the analysis unit is included in the security business. Analytical 
division should provide the company's management and reliable analytical process the information needed to make 
effective management decisions in all areas of information security. 

The main functions of the analytical unit are: 

• Ensuring the timely receipt of reliable and comprehensive information on data protection; 

• Accounting, compilation and ongoing analysis of materials on the status of information security company 
(its branches and representative offices); 

• Analysis of possible threats to information security, simulation of real-world scenario of possible actions of 
competitors (intruders), affecting the interests of the company; 

• Ensuring the effectiveness of the analysis of available information, avoiding duplication with its collection, 
processing and dissemination; 

• Monitoring the situation on the market of products, goods and services, as well as in the external environment in 
order to identify the events and facts that may be relevant to the enterprise; 

• Ensuring the safety of their own information resources, limiting employee access to enterprise analytical 
information; 

• Preparation of conclusions and recommendations aimed at improving the effectiveness of planned and taken 
measures to protect the information and clarification (correction) organizational and planning documents of the 
enterprise and its subdivisions; 

• Make recommendations for changes and additions to the methodological documents regulating algorithm of 
actions to protect the employees of the enterprise information (enterprise standards). 

The presence of a constant analytical work, its character and the results determine the need, the basics of 
organization, structure and content of a comprehensive information security requirements for its effectiveness and direction 
of its development and improvement. Analysis of the state information security system significantly affects the quantity, 
composition and structure of business units, directly address these challenges (security service companies, security service. 
Secrecy subdivision et al.). The efficiency and quality of doing analytical work in the company fully depends on the state 
of security of information resources of the enterprise classified as protected, as well as the timeliness and validity of 
measures to prevent leakage of confidential information and loss of media. The effectiveness of analytical work and its 
results are the basis for making management decisions by management in the organization of information security. Taking 
into account the results of the analytical work can be generated following basic steps: 

• Refinement plans of the enterprise information protection, the inclusion of additional activities; 



Index Copernicus Value: 3.0 - Articles can be sent to editor@impactjournals.us 



Organization of Analytical Work in the Field of Information Security in the Enterprise 



25 



• Clarification of the distribution of tasks and functions between the departments of the enterprise; 

• Processing (clarification) officers (functional) responsibilities of employees, including managers, improved 
crossing of the object and intra-modes; 

• Limiting the number of persons admitted to confidential information on the various activities of the enterprise; 

• Revision of the degree of confidentiaUty and their carriers; 

• Increased security system company and its facilities, the use of special measures to protect the information on 
individual objects (in the premises); 

• Decided to limit the publication in the press, use in advertising and publishing activities of certain materials 
(materials on selected topics), the access of travelers, to exclude consideration of these materials at conferences, 
seminars, meetings, etc. 

CONCLUSIONS 

The maintenance of effective analytical work is possible only with the necessary information. To obtain it, 
it should be clearly stated purpose, which determines the specific sources of information. Analytical work in the enterprise 
should be conducted consistently and continuously, be fully complete the study. 
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